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DETAILED ACTION 

1. Claims 1-28 are pending in the application 

Response to Arguments 

Applicant's arguments filed 12/26/2007 have been ftilly considered but they are not 
persuasive. 

Regarding the 1 12 rejections, the Applicant has pointed to paragraphs [0056-0057] to 
define the temis "response request ID" and card c()iiipan\ ID number." 

In the Non-final Office Action, the Examiner rejected the limitation "response request 
ID" as being indefinite. The Examiner wrote on page 2 of the Office Action "It is unclear 
whether it is a response, a request or an ID that the Applicant is claiming." Paragraph [0056] 
recites "When the random number encrypted by the IC card based on the public key is sent to the 
electronic seal, the response request ID (identification) encrypted based on the public key is also 
sent." The Examiner does not see how the cited part of the specification defines limitation 
"response request ID." 

In the Non-final Office Action, the Examiner also rejected the limitation "card company 
ID number." The Examiner wrote on page 2 of the Office Action, "It is tmclear what a 'card 
company ID number' If it is a number of a "card company", the definition of "card company" is 
unclear. A card company can be broadly interpreted as a credit card company, a IC card 
manufacturing company, a plajdng card company and so on." The cited part of the specification. 
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merely references the limitation "card company" without offering any definition for what the 
"card company ID number is." 

Therefore the Examiner repeats the 1 12 rejections, as the Applicant has failed to clarify 
the Examiner's rejections based on the limitations. 

The Apphcants arguments regarding the 102 rejection are considered persuasive, a new 
rejection follows. 



Claim Rejections - 35 USC § 112 

The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the 
subject matter which the applicant regards as his invention. 

Claims 2, 6, 16, 22 are rejected under 35 U.S.C. 1 12, second paragraph, as being 
indefinite for failing to particularly point out and distinctly claim the subject matter which 
applicant regards as the invention. 

The Claims recite the limitation "response request ID." The term "response request ID" is 
not well known in the art. It is unclear whether it is a response, a request or an ID that the 
Applicant is claiming. 

Claims 3, 9-10, 17, 23-24 rejected under 35 U.S.C. 1 12, second paragraph, as being 
indefinite for failing to particularly point out and distinctly claim the subject matter which 
applicant regards as the invention. 
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Claims 3, 9-10, 17, 23-24 recite the limitation "card company ID number." It is imclear 
what a "card company ID number." If it is a number of a "card company," the definition of "card 
company" is unclear. A card company can be broadly interpreted as a credit card company, a IC 
card manufacturing company, a playing card company and so on. 

Claim Rejections - 35 USC§ 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claims 1-2, 4-8, 11-14 rejected under 35 U.S.C. 103(a) as being unpatentable over 

Azuma in view of Schneier 



Regarding Claims 1, 4-7, 11-14, 

Azuma (6704608) teaches an authentication system comprising: 

an IC card, and an electronic seal, wherein: the IC card includes: 
a random number generation section for generating a random number, a 
prescribed key memory section for storing a prescribed key, a first encryption section 
for encrypting the generated random number based on the prescribed key, and a first 
output section for outputting the random number encrypted based on the prescribed 
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key; ("The IC card generates a random number M, encrypts it using ttie public l<ey Mb, and 
sends an encrypted numeral WM to the second terminal apparatus" Column 19, lines 66-67, 
Column 20, line 1) The Examiner interprets ttie prescribed l<ey as a pubiic l<ey. Tlie Examiner 
interprets that the public l<ey must be inherently stored in a memory section before encrypting 
the random number with the public key. The Examiner interprets the output section as the 
section that outputs the encrypted random number to the second terminal device. 

Azuma further teaches an electronic seal which includes: 

a second input section for inputting the random number encrypted based on the 
prescribed key, a secret key memory section for storing a secret key related to the 
prescribed key, a second decoding section for decoding, based on the secret key, the 
random number encrypted based on the prescribed key; (The second terminal apparatus 
decrypts the numeral WM, using a secret key, encrypts it using a public key to obtain the 
numeral WN, and sends the numeral WN to the IC card. " Column 20, lines 1-4) The Examiner 
interprets the secret key memory section, the section that stores the secret key used to encrypt 
the numeral WM. 

Azuma further teaches the IC card further includes: 

a comparison section for comparing the random number generated by the 
random number generation section and the random number decoded based on the 
prescribed key; and the IC card and the electronic seal mutually exchange data for 
performing authentication. ("The IC card receives from the second terminal apparatus the 
numeral WN, obtains a numeral N by decrypting the numeral WN, and judges whether the 
numeral n matches the numeral M. When they do not match, the IC card abnonvally ends the 
mutual authentication process. When they match, the IC card sends a confirmation command 
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to the second terminal apparatus in step S82 tliat ends tlie mutual authentication" Column 20, 
lines 5-11) 

The Examiner interprets the first input section as the section that receives the random 
number from the terminal. The Examiner interprets the first decoding section as the section 
that decrypts the numeral WN. The Examiner interprets the comparison section as the judging 
unit that Judges whether the numeral n matches the numeral M. 

Azuma teaches a mobile device including an electronic seal. 
("the second terminal apparatus is used in a machine for payment, such as a cash dispenser" 
Column 17, lines 5-6) 

Azuma does not explicitly teach the electric seal having a second encryption 
section for encrypting, based on the secret key, the random number decoded based on 
the secret key, and a second output section for outputting the random number 
encrypted based on the secret key and the IC card having a first input section for 
inputting the random number encrypted based on the secret key, a first decoding 
section for decoding, based on the prescribed key, the random number encrypted 
based on the secret key. 

Rather Azuma teaches that the electric seal encrypts based on a public key, and 
outputs the random number encrypted based on the public key and the IC card having a 
first input section for inputting the random number encrypted based on the public key, a 
first decoding section for decoding based on the private key, the random number 
,encrypted based on the private key. 

Schneier teaches encrypting using a private key and decrypting using a public 
key. ("Alice encrypts the document with her private key, thereby signing the 
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document... Bob decrypts the document with Alice's public key, thereby verifying the 
signature" pg. 37 of Applied Cryptography, 2nd Edition, 1996) 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Azuma to have the electronic seal perform the method of encrypting 
using the private key and the IC card decode using the public key, as described by 
Schneier. 

The claim would have been obvious because the substitution of one known 
method (encrypting a number using a private key and decrypting using a public key, as 
described by Azuma) for another (encrypting a number using a public key and 
decrypting using a private key, as described by Schneier) would have yielded 
predictable results to one of ordinary skill in the art at the time of the invention. In both 
cases the first party has one part of the key pair, and encrypts a random number, where 
only someone who possessed the second part of the key pair could recover the random 
number. In this way, the authentication occurs, because only a holder of the other part 
of the key pair could recover the random number. 



Regarding Claim 2, 8 

Azuma teaches an electronic seal according to claim 1 , wherein: 
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when the input section inputs a first response request ID ("The second terminal 
apparatus is used in a machine for payment... a touch panel for receiving an input of an 
identification number of an IC card owner" Column 17, lines 5-6, 11-12) 

the electronic seal further includes a response request ID memory 
section for storing a second response request ID, and a comparison section for 
comparing the decoded first response request ID and the second response request 
ID, ("The host apparatus has a database which stores a plurality of entries of IC card code 
numbers in correspondence with a plurality of pieces of bio-information, so that the host 
apparatus can judge whether the card owner is proper" Column 18, lines 60-64) 

and when the decoded first response request ID matches the second response 
request ID, the encryption section encrypts the decoded random number ("When a 
combination of the bio-information read by the sensor and the typed code number is 
found in the database, the controller 73 goes to the process in the flowchart shown in 
Figure 24" Column 19, lines 2-5) 

Azuma does not explicitly teach the first response request ID encrypted by the IC 
card based on the prescribed key, the output section of the IC card outputs the 
encrypted response request ID to the electronic seal, and the decoding section of the 
electronic seal decodes the input first response request ID based on the secret key. 

While Azuma teaches encrypting and decrypting a random value, Azuma sends 
the ID without encryption. However because encrypting a random number is analogous 
with encrypting an ID and the IC already possess all the features described in order to 
encrypt and decrypt an ID with a secret key (encryptor, decryptor, secret key), without 
any modification to the system one of ordinary skill could encrypt the ID sent by the IC 
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card with a public key, and ttie terminal would subsequently decrypt the ID with the 
secret key. 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to encrypt the ID sent by the IC card described in Azuma with a public key, 
and decode the ID based on the secret key. 

The prior art Azuma, teaches all the elements of the claim (public key, private 
key, ID) one skilled in the art could have combined the elements as claimed by known 
methods (encrypting with a public key, decrypting with a private key) with no change in 
their respective functions, and the combination would have yielded predictable results 
to one of ordinary skill in the art at the time of the invention. 

Claims 3, 9-10 are rejected under 35 U.S.C. 103(a) as being unpatentable over Azuma in 
view of Schneier further in view of Reece (20030150915). 

Regarding Claim 3, 

Azuma teaches an electronic seal according to claim 1 , wherein: the secret key 
memory section stores a plurality of secret keys. 

Azuma does not explicitly teach that the secret keys respectively corresponding 
to a plurality of card company ID numbers, and when the input section inputs a card 
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company ID number, the secret key memory section specifies tlie secret l<ey 
corresponding to ttie input card company ID number among the plurality of secret 

keys. 

Reece (20030150915) teaches a smart card that contains a Card Holder Data 
unit (Figure 1, 1320) which in turn contains Card Holder company ID number. ("CH 
company ID number, Paragraph [0278]). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify assigning a secret key per each IC card as taught by Azuma with 
assigning a secret key corresponding to input card company ID number. 

The motivation is that Reece teaches that company ID number is a well known 
way to represent and identify the Card Holder Data Unit. One of ordinary skill would 
have been able to modify the system of Azuma to correspond a plurality of secret keys 
with corresponding card company ID numbers. 

Regarding Claim 9, 

Azuma teaches an IC card according to claim 6. Azuma does not explicitly teach 
further comprising a card company ID number memory section for storing a card 
company ID number, wherein the output section outputs the card company ID number. 

Reece (20030150915) teaches a smart card that contains a Card Holder Data 
unit (Figure 1, 1320) which in turn contains Card Holder company ID number. ("CH 
company ID number, Paragraph [0278]). 
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It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify the IC card to comprise a card company ID number memory 
section for storing a card company ID number. 

The motivation is that Reece provides a way of storing a company ID number in 
an IC card. 

Regarding Claim 10, 

Azuma teaches an IC card according to claim 6. Azuma does not explicitly teach 
wherein the prescribed key memory section stores a plurality of prescribed keys 
respectively corresponding to a plurality of card company ID numbers. 

Reece (20030150915) teaches a smart card that contains a Card Holder Data 
unit (Figure 1, 1320) which in turn contains Card Holder company ID number. ("CH 
company ID number, Paragraph [0278]). 

Because Reece teaches that company ID number is a well known way to 
represent and identify the Card Holder Data Unit, And Azuma teaches using 
public/private key pairs to provide authentication, it would have been obvious to one of 
ordinary skill in the art at the time of the invention to modify assigning a secret key per 
each IC card as taught by Azuma with assigning a secret key corresponding to input 
card company ID number. 

The motivation is to tie the key to the identity of the card company ID for the 
purposes of authentication. 
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Claims 15, 18-19, 20-21, 24, 25-27 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Azuma in view of Schneier further in view of Yu (6067621). 

Regarding Claims 15-16, 18-19, 20-22, 24, 25-27, 

Azuma (6704608) teaclies an autlientication system comprising: 

an IC card, and an electronic seal, wherein: the IC card includes: 
a random number generation section for generating a random number, a 
prescribed l<ey memory section for storing a prescribed key, a first encryption section 
for encrypting the generated random number based on the prescribed key, and a first 
output section for outputting tlie random number encrypted based on the prescribed 
key; ("The IC card generates a random number M, encrypts it using the public key Mb, and 
sends an encrypted numeral WM to the second terminal apparatus" Column 19, lines 66-67, 
Column 20, line 1) The Examiner interprets the prescribed key as a public key. The Examiner 
interprets that the public key must be inherently stored in a memory section before encrypting 
the random number with the public key. The Examiner interprets the output section as the 
section that outputs the encrypted random number to the second terminal device. 
Azuma further teaches an electronic seal which includes: 
a second input section for inputting the random number encrypted based on the 
prescribed key, a secret key memory section for storing a secret key related to the 
prescribed key, a second decoding section for decoding, based on the secret key, the 
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random number encrypted based on the prescribed key; (The second terminal apparatus 
decrypts the numeral WM, using a secret key, encrypts it using a public key to obtain the 
numeral WN, and sends the numeral WN to the IC card." Column 20, lines 1-4) The Examiner 
interprets the secret key memory section, the section that stores the secret key used to encrypt 
the numeral WM. 

Azuma furttier teaclies tlie IC card furtlier includes: 

a comparison section for comparing the random number generated by the 
random number generation section and the random number decoded based on the 
prescribed key; and the IC card and the electronic seal mutually exchange data for 
performing authentication. ("The IC card receives from the second terminal apparatus the 
numeral WN, obtains a numeral N by decrypting the numeral WN, and judges whether the 
numeral n matches the numeral M. When they do not match, the IC card abnormally ends the 
mutual authentication process. When they match, the IC card sends a confirmation command 
to the second terminal apparatus in step S82 that ends the mutual authentication" Column 20, 
lines 5-11) 

The Examiner interprets the first input section as the section that receives the random 
number from the terminal. The Examiner interprets the first decoding section as the section 
that decrypts the numeral WN. The Examiner interprets the comparison section as the judging 
unit that judges whether the numeral n matches the numeral M. 

Azuma teaches a mobile device including an electronic seal. 
("the second terminal apparatus is used in a machine for payment, such as a cash dispenser" 
Column 1 7, lines 5-6) 

Azuma does not explicitly teach the electric seal having a second encryption 
section for encrypting, based on the secret key, the random number decoded based on 
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the secret key, and a second output section for outputting ttie random number 
encrypted based on ttie secret l<ey and ttie IC card liaving a first input section for 
inputting tlie random number encrypted based on tlie secret l<ey, a first decoding 
section for decoding, based on tlie prescribed l<ey, tlie random number encrypted 
based on ttie secret l<ey. 

Rattier Azuma teacties ttiat ttie electric seal encrypts based on a public key, and 
outputs the random number encrypted based on the public key and the IC card having a 
first input section for inputting the random number encrypted based on the public key, a 
first decoding section for decoding based on the private key, the random number 
encrypted based on the private key. 

Schneier teaches encrypting using a private key and decrypting using a public 
key. ("Alice encrypts the document with her private key, thereby signing the 
document... Bob decrypts the document with Alice's public key, thereby verifying the 
signature" pg. 37 of Applied Cryptography, 2nd Edition, 1996) 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Azuma to have the electronic seal perform the method of encrypting 
using the private key and the IC card decode using the public key, as described by 
Schneier. 

The claim would have been obvious because the substitution of one known 
method (encrypting a number using a private key and decrypting using a public key, as 
described by Azuma) for another (encrypting a number using a public key and 
decrypting using a private key, as described by Schneier) would have yielded 
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predictable results to one of ordinary skill in the art at the time of the invention. In both 
cases the first party has one part of the key pair, and encrypts a random number, where 
only someone who possessed the second part of the key pair could recover the random 
number. In this way, the authentication occurs, because only a holder of the other part 
of the key pair could recover the random number. 

Azuma does not explicitly teach performing a one way hash function on the value 
output from the symmetrical key cipher algorithm, changing the random number into a 
predetermined value and storing it in the terminal... The one-time password is verified 
then by receiving the one-time password generated from the terminal, through a 
predetermined communication medium, reading the secret key and the random 
number stored in the server, performing a symmetrical key cipher algorithm using the 
secret key and the random number as an input, performing a one way hash function on 
the valve output from the symmetrical key algorithm and authenticating a user, if the 
predetermined format is the same as the received one time password, and not 
authenticating the user if not the same 

Yu teaches a first hash operation section for performing a hash operation using 
an IC card's secret key and a random number as an input, "performing a one way hash 
function on the value output from the symmetrical l<ey cipher algorithm, changing the random 
number into a predetermined value and storing it in the terminal... The one-time password is 
verified then by receiving the one-time password generated from the terminal, through a 
predetermined communication medium, reading the secret key and the random number stored 
in the server, performing a symmetrical key cipher algorithm using the secret key and the 
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random number as an input, performing a one way tiasli function on tlie valve output from tlie 
symmetrical key algorithm... and authenticating a user, if the predetermined format is the same 
as the received one time password, and not authenticating the user if not the same."(Column 
4, lines 44-65) 

Azuma already teaches encryption witli public/private keys. Hashing is a well 
known method of encryption. 

Therefore it would have been obvious to one of ordinary skill in the art at the time 
of the invention to modify the system of Azuma to include a hash function, to generate 
a one-time password using a hash function to hash an input random number and 
secret key for the purpose of authentication. 

The motivation is that Yu teaches a well known way of authenticating using a 
hash function, a secret key of an IC card and a random number, and the combination 
of Azuma with Yu would improve the security. 

Azuma and Yu do not teach not explicitly teach a first hash operation section for 
performing a hash operation using the user's inherent information stored in the first 
user's inherent information memory section and the generated random number so as 
to output a first hash operation result, a second hash operation section for performing a 
hash operation using the user's inherent information stored in the second user's 
inherent memory section and the decoded random number so as to output a second 
hash operation result, or a comparison section for comparing the first hash operation 
result and the decoded second has operation result. 
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It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify the method of Yu to instead hash a user's inherent information and 
random number instead of a secret key and a random number. 

The motivation is that the system of Azuma already teaches inherent information, 
and one of ordinary skill in the art would be able to use the inherent information instead 
of a secret key when generating the hash with predictable results. 

Regarding Claims 16, 22 

Azuma and Yu teach an electronic seal according to claim 15, wherein Azuma teaches: 

when the input section inputs a first response request ID ("The second terminal 
apparatus is used in a macttine for payment... a touctt panel for receiving an input of an 
identification number of an IC card owner" Column 17, lines 5-6, 11-12) 

the electronic seal further includes a response request ID memory 
section for storing a second response request ID, and a comparison section for 
comparing the decoded first response request ID and the second response request 
ID, ("The host apparatus has a database which stores a plurality of entries of IC card code 
numbers in correspondence with a plurality of pieces of bio-information, so that the host 
apparatus can judge whether the card owner is proper" Column 18, lines 60-64) 

and when the decoded first response request ID matches the second response 
request ID, the encryption section encrypts the decoded random number ("When a 
combination of the bio-information read by the sensor and the typed code number is 
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found in ttie database, tlie controller 73 goes to the process in the flowchart shown in 

Figure 24" Column 19, lines 2-5) 

Azuma and Yu do not explicitly teach the first response request ID encrypted by 

the IC card based on the prescribed key, the output section of the IC card outputs the 

encrypted response request ID to the electronic seal, and the decoding section of the 

electronic seal decodes the input first response request ID based on the secret key. 
It would have been obvious to one of ordinary skill in the art at the time of the 

invention to encrypt the ID sent by the IC card described in Azuma with a secret key, 

and decode the ID based on the same secret key. 

The motivation is that in the limitations described in Claim 1 , the electronic seal and the 
IC already possess all the features described in order to encrypt and decrypt an ID with a secret 
key (encryptor, decryptor, secret key). However instead of encrypting and decrypting a random 
value, instead an ID is encrypted and decrypted. Without any modification to the system one of 
ordinary skill could encrypt the ID sent by the IC card with a public key, and the terminal would 
subsequently decrypt the ID with the secret key with predictable results. 

Claims 17, 23-24 are rejected under 35 U.S.C. 103(a) as being unpatentable over Azuma 
in view of Schneier ftirther in view of Yu as applied to claimlS above, and ftirther in view of 
Reece. 



Regarding Claim 17, 
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Azuma and Yu teach an electronic seal according to claim 15, wherein Azuma teaches: 
the secret key memory section stores a plurality of secret keys. 

Azuma does not explicitly teach that the secret keys respectively corresponding 
to a plurality of card company ID numbers, and when the input section inputs a card 
company ID number, the secret key memory section specifies the secret key 
corresponding to the input card company ID number among the plurality of secret 
keys. 

Reece (20030150915) teaches a smart card that contains a Card Holder Data 
unit (Figure 1, 1320) which in turn contains Card Holder company ID number. ("CH 
company ID number, Paragraph [0278]). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify assigning a secret key per each IC card as taught by Azuma with 
assigning a secret key corresponding to input card company ID number. 

The motivation is that Reece teaches that company ID number is a well known 
way to represent and identify the Card Holder Data Unit. One of ordinary skill would 
have been able to modify the system of Azuma to correspond a plurality of secret keys 
with corresponding card company ID numbers. 



Regarding Claim 23, 
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Azuma and Yu teach an IC card according to claim 20. Azuma does not explicitly 
teach further comprising a card company ID number memory section for storing a card 
company ID number, wherein the output section outputs the card company ID number. 

Reece (20030150915) teaches a smart card that contains a Card Holder Data 
unit (Figure 1, 1320) which in turn contains Card Holder company ID number. ("CH 
company ID number, Paragraph [0278]). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify the IC card to comprise a card company ID number memory 
section for storing a card company ID number. 

The motivation is that Reece provides a way of storing a company ID number in 
an IC card. 

Regarding Claim 24, 

Azuma and Yu teach an IC card according to claim 20. Azuma does not explicitly 
teach wherein the prescribed key memory section stores a plurality of prescribed keys 
respectively corresponding to a plurality of card company ID numbers. 

Reece (20030150915) teaches a smart card that contains a Card Holder Data 
unit (Figure 1, 1320) which in turn contains Card Holder company ID number. ("CH 
company ID number, Paragraph [0278]). 

Because Reece teaches that company ID number is a well known way to 
represent and identify the Card Holder Data Unit, And Azuma teaches using 
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public/private key pairs to provide autlientication, it would liave been obvious to one of 
ordinary sl<ill in ttie art at ttie time of ttie invention to modify assigning a secret key per 
eacti IC card as taugtit by Azuma witti assigning a secret key corresponding to input 
card company ID number. 

The motivation is to tie the key to the identity of the card company ID for the 
purposes of authentication. 

Conclusion 

Any inquiry concerning tliis communication or earlier communications from tlie 
examiner should be directed to HARRIS C. WANG whose telephone number is (571)270-1462. 
The examiner can normally be reached on M-F 9-5:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, KRISTINE KINCAID can be reached on (571) 272-4063. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

HCW 

/Kristine Kincaid/ 

Supervisory Patent Examiner. Art Unit 2139 



